$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft File: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft (raw, json) Hash identifier: otJ7nBNGns+Fpsrt/WRzl0E2PcsnQXiCd1qmfdlpn6E= Subject key identifier: 35:8A:B0:2A:7F:E5:EC:E5:DE:D7:66:A0:F6:34:67:11:57:38:DD:23 Authority key identifier: 62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD Certificate issuer: /CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD Certificate serial: 665D5CCFDBC6503AB5C5767EDBAB99B61DDB5426 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft Manifest number: 4D Signing time: Thu 09 Apr 2026 06:39:05 +0000 Manifest this update: Thu 09 Apr 2026 06:34:05 +0000 Manifest next update: Fri 10 Apr 2026 08:22:05 +0000 Files and hashes: 1: 326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa (hash: 2VvQmqh0rgVlWv8W6Pzf59GFxuPhxLO/UhXjGSwmG7I=) 2: 326130613a363034343a376436303a3a2f34342d3434203d3e20323134353130.roa (hash: y/xuVv7X6zYCJrPA+bDxsoe/LQIZz7CWdfVo8c7UFKw=) 3: 326130613a363034343a376432303a3a2f34382d3438203d3e20323134353130.roa (hash: c4XzPukkzKV+FHVuebz0bc6eIqhJ7TnmT9Q2167h39Y=) 4: 627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl (hash: sie5/MAN3CqGaxz1Fn23473QSf5Pt5wkUaS/7RA/K7U=) 5: 326130613a363034343a376430303a3a2f34342d3434203d3e20323134353130.roa (hash: ae529QqeuntcTFvv9T15+WP4/UdZC9RUyhsU7rktznM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 10 Apr 2026 08:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:5d:5c:cf:db:c6:50:3a:b5:c5:76:7e:db:ab:99:b6:1d:db:54:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD Validity Not Before: Apr 9 06:34:05 2026 GMT Not After : Apr 10 08:22:05 2026 GMT Subject: CN=358AB02A7FE5ECE5DED766A0F63467115738DD23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:06:0b:c4:24:2e:33:35:76:3e:46:d1:29:fe: d1:2a:4a:b2:d2:a7:05:53:28:f2:87:5c:8f:11:77: c6:0a:5c:f6:71:2b:96:72:da:70:2c:51:b2:c7:2c: e5:c6:3d:0b:1b:31:76:f7:43:36:0b:6d:2f:64:40: 6d:17:ea:c0:a9:28:08:55:c2:dc:50:6f:2b:96:58: 4e:68:4d:8d:2c:dd:54:00:bc:ef:9a:28:82:ad:8d: c8:4f:a6:7c:f3:13:1b:6d:40:da:d6:e1:21:6e:a5: dd:59:1f:f7:fa:4b:f5:a8:a6:78:2e:c1:6a:3a:12: 81:0d:59:6a:c0:76:05:f5:18:2e:8b:66:6b:5c:7e: 51:e1:ed:3d:ed:a4:fb:3d:54:ed:a6:a7:1b:ba:fa: f2:bd:6d:ba:60:0a:d3:e4:37:63:e4:fe:cc:75:e4: 25:57:cb:f2:c2:9a:7c:a1:52:30:f7:b5:6b:e4:3d: 21:cb:99:3a:e4:83:1f:39:15:87:46:3e:51:bb:de: 7f:83:76:65:95:b2:a4:5d:e4:b4:89:08:23:ad:1d: 04:35:17:61:56:50:ac:ca:ba:53:51:5b:aa:60:e0: fa:33:23:09:7e:e0:d2:11:f1:c4:fe:1b:6d:96:9b: 57:fb:28:84:2f:bd:77:14:84:fb:79:4b:6b:ea:28: 0e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8A:B0:2A:7F:E5:EC:E5:DE:D7:66:A0:F6:34:67:11:57:38:DD:23 X509v3 Authority Key Identifier: keyid:62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:52:64:f5:4f:62:fb:19:6d:bd:3c:83:25:22:a8:2a:9a:49: 14:52:52:fd:74:78:2e:7c:3b:1c:c8:16:3c:a4:e9:6b:fc:c8: 05:95:82:45:85:16:f7:7b:b9:ec:d4:06:99:82:3d:8b:90:59: 8b:9b:be:eb:de:d7:8d:5b:57:af:20:e6:c7:42:76:d3:9d:6c: fb:65:88:05:37:f3:c3:c5:e3:dc:05:c0:6a:35:6b:34:35:13: 09:0e:ff:78:23:06:f8:e8:86:ac:5e:fa:4a:d7:a1:cb:3e:83: 2b:16:ae:42:29:30:76:fd:17:9e:ea:f2:b8:65:15:ba:45:41: 85:0f:bb:d0:f8:0e:b0:1b:71:49:c5:17:28:22:c0:c9:23:69: 86:76:48:8c:97:e3:19:27:84:36:0b:be:da:2a:cf:6b:32:f5: 7a:44:80:ff:d3:45:7e:59:33:ec:a8:15:ea:13:06:02:96:2e: a8:42:55:cd:38:99:33:c7:3c:f4:00:62:c9:27:62:92:7b:bc: 2c:d5:cc:6b:55:5d:c6:a4:3d:cd:18:24:32:96:b8:0f:29:05: 67:ae:89:39:10:3e:aa:f5:91:63:ee:95:ae:5f:08:00:4e:cc: c0:9c:58:75:8a:fc:1d:48:8e:6e:91:ff:db:a7:5f:55:1a:18: d9:17:b1:29 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUZl1cz9vGUDq1xXZ+26uZth3bVCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI3QjM4NzYwNERFNDRENjAwNkYwRTc1NjdFMkQwN0VF ODJDRjZCRDAeFw0yNjA0MDkwNjM0MDVaFw0yNjA0MTAwODIyMDVaMDMxMTAvBgNV BAMTKDM1OEFCMDJBN0ZFNUVDRTVERUQ3NjZBMEY2MzQ2NzExNTczOEREMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2BgvEJC4zNXY+RtEp/tEqSrLS pwVTKPKHXI8Rd8YKXPZxK5Zy2nAsUbLHLOXGPQsbMXb3QzYLbS9kQG0X6sCpKAhV wtxQbyuWWE5oTY0s3VQAvO+aKIKtjchPpnzzExttQNrW4SFupd1ZH/f6S/Wopngu wWo6EoENWWrAdgX1GC6LZmtcflHh7T3tpPs9VO2mpxu6+vK9bbpgCtPkN2Pk/sx1 5CVXy/LCmnyhUjD3tWvkPSHLmTrkgx85FYdGPlG73n+DdmWVsqRd5LSJCCOtHQQ1 F2FWUKzKulNRW6pg4PozIwl+4NIR8cT+G22Wm1f7KIQvvXcUhPt5S2vqKA4VAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUNYqwKn/l7OXe12ag9jRnEVc43SMwHwYDVR0j BBgwFoAUYns4dgTeRNYAbw51Z+LQfugs9r0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGJmYTdhOWYtMjhkMy00NWIwLWE4MzktYTU3NTE5ZWNh ZWFlLzIvNjI3QjM4NzYwNERFNDRENjAwNkYwRTc1NjdFMkQwN0VFODJDRjZCRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MjdCMzg3NjA0REU0NEQ2MDA2RjBFNzU2 N0UyRDA3RUU4MkNGNkJELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzRiZmE3YTlmLTI4ZDMtNDViMC1hODM5LWE1NzUxOWVjYWVhZS8yLzYyN0IzODc2 MDRERTQ0RDYwMDZGMEU3NTY3RTJEMDdFRTgyQ0Y2QkQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAUmT1 T2L7GW29PIMlIqgqmkkUUlL9dHgufDscyBY8pOlr/MgFlYJFhRb3e7ns1AaZgj2L kFmLm77r3teNW1evIObHQnbTnWz7ZYgFN/PDxePcBcBqNWs0NRMJDv94Iwb46Ias XvpK16HLPoMrFq5CKTB2/Ree6vK4ZRW6RUGFD7vQ+A6wG3FJxRcoIsDJI2mGdkiM l+MZJ4Q2C77aKs9rMvV6RID/00V+WTPsqBXqEwYCli6oQlXNOJkzxzz0AGLJJ2KS e7ws1cxrVV3GpD3NGCQylrgPKQVnrok5ED6q9ZFj7pWuXwgATszAnFh1ivwdSI5u kf/bp19VGhjZF7Ep -----END CERTIFICATE-----Generated at Thu Apr 9 23:59:42 2026 by rpki-client